PRIVACY POLICY
WHY THIS INFORMATION
Pursuant to Regulation (EU) 2016/679 on the protection of personal data (hereinafter referred to as the ‘Regulation’ or according to the English acronym of General Data Protection Regulation, “GDPR”), this page provides information regarding the methods for processing the personal data of users who consult or interact with the Fiocchi Munizioni S.p.A. website (the ‘Site’) at the following address: www.fiocchi.com
TITOLARE DEL TRATTAMENTO DEI DATI PERSONALI
The owner of the personal data processing is Fiocchi Munizioni S.p.A. with registered office in Lecco, via Santa Barbara n. 4 23900 (LC) (hereinafter referred to as ‘Owner’ or ‘Company’), who can be contacted at the following address: [email protected].
TYPE OF DATA PROCESSED
Navigation data
The servers and computer systems responsible for the operation of the Site acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, enable users to be identified.
This category of data includes the IP addresses or domain names of the devices used by users connecting to the Site, as well as the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of messages to the contact addresses indicated on the Site, as well as the filling in and forwarding of the forms on the Site, entail the acquisition of the sender’s personal and contact data, necessary for replying, as well as all the personal data included in the communications, forms and curricula transmitted.
In particular, through the Site, all information provided by users through the use of the “Contact Us” and “Work with Us” sections of the Site and, in particular, personal data, contact data, as well as any further personal data contained in the request sent as well as information relating to work experience or training are collected and processed.
In the event that the user provides personal data (such as, but not limited to, personal data and contact details) for the purpose of subscribing to the newsletter, the relevant personal data will be processed for the purpose of providing the relevant service.
Should the user contact the Company, the Company will retain such correspondence for the period of time indicated below.
PURPOSE AND LEGAL BASIS OF PROCESSING
With reference to navigation data, such data are used for the sole purpose of checking the correct functioning of the Site. The data could also be used by the public security authorities to ascertain responsibility in the event of any computer crimes to the detriment of the Site. Without prejudice to the foregoing, the data will be stored for the period of time provided for by the relevant legal regulations and, in any case, for the time strictly necessary to provide the user with the requested service and to ensure the transmission of the communication. For this purpose, the data are processed on the basis of Article 6.1 letter f) of the GDPR, i.e. for the pursuit of the legitimate interest of the Data Controller. The Controller will process the data voluntarily provided by the user for the purposes set out below:
- management of personnel search and selection procedures and inclusion of the CV in the Company’s archives in order to contact the user for possible future interviews. For this purpose, the data are processed on the basis of Article 6.1 letter b) GDPR, as they are necessary for the execution of pre-contractual measures taken at the request of the user;
- to follow up user requests received through the ‘Contact Us’ section of the Site. For this purpose, the data are processed on the basis of Article 6.1 letter b) GDPR, insofar as they are necessary for the performance of a contract to which the user is a party or for the execution of pre-contractual measures taken at the user’s request;
- sending informative material, advertising material or commercial communications related to the Company’s activities. For this purpose, the data are processed on the basis of Article 6.1 letter a) GDPR, where the user has given his/her consent by ticking the appropriate box in the [indicate in which section of the Site the consent will be collected]. It should be noted that the Company may use the user’s email address in order to send information on its services and initiatives, also under the conditions provided for in Article 130 paragraph 4 of Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018 (‘Privacy Code’);
- to comply with legal obligations, including cooperating with public security authorities where required. For this purpose, the data is processed on the basis of Article 6.1 letter c) GDPR, as it is necessary for the fulfilment of a legal obligation to which the Data Controller is subject.
COOKIES
Cookies are small text files that are placed on the devices the user uses to browse the Internet and thus when visiting websites. Cookies, in particular, allow a website to (i) recognise the device with which the user has accessed the site; (ii) track the user’s navigation through the different pages of a website; (iii) identify users who return to visit the site.
Cookies are used for a variety of purposes including, but not limited to, to ensure the efficient operation of the Websites and to provide information to the owners of the Site.
The setting of third party analytics and targeting cookies, the purpose of which is to improve user experience on the Site and collect useful information, is optional. We will not set these cookies unless you enable them through the appropriate Cookie Banner that appears when you log in to the Site. For more detailed information on the cookies we use, please see and refer to our cookie policy at the following link (insert link to refer to cookie policy above).
RECIPIENTS OF DATA
Processing will be carried out by employees and collaborators of the Data Controller, expressly and duly authorised to process data for the pursuit of the purposes indicated above. In addition, in certain cases, personal information may also be disclosed to suppliers, contractors, consultants and appointees who carry out maintenance operations on the website content or activities related to the provision of certain functions or services. Recipients will only have access to personal information to the extent required by the performance of their duties, subject to certain contractual obligations of confidentiality. In any case, the recipients of the data will only be able to process them following their appointment as external data processors by the Data Controller, pursuant to Article 28 of the Regulation.
INTERNATIONAL TRANSFERS
In view of the existence of computer links and/or correspondence with the above-mentioned recipients, personal data may also be transferred outside the European Economic Area (EEA) and specifically to US territory. In this case, the Company ensures that the transmission of data will be carried out on the basis of adequate safeguards, in accordance with Articles 45-47 of the Regulation as well as in accordance with the indication of the European Committee for the Protection of Personal Data.
In particular, in the event of transfers to the United States, standard contractual clauses or standard data protection clauses will be adopted, as recommended by the European Committee for the Protection of Personal Data. For further information in this regard, please contact the Company via the e-mail address indicated below.
DATA RETENTION
The period of data retention depends on the purposes for which the data is processed and therefore this period may vary. In any case, personal data will be kept for the time necessary (i) to search for professional positions in line with the candidates’ profiles as resulting from the curricula sent as well as from the information sent through the form; (ii) to manage specific user requests coming from the ‘Contact us’ section; (iii) until the user’s consent is revoked for the purposes set forth in letter c) of the paragraph entitled ‘Purposes and legal basis of the processing’ of this policy, or, until the right to opt-out is exercised. In the absence of revocation, the data will be processed for a maximum period of 24 months; (iv) for the purpose of asserting rights in court, as well as (v) as provided for by applicable legislation.
RIGHTS OF USERS/INTERESTED PARTIES
Users, as data subjects, have the right to exercise vis-à-vis the Controller, the rights set out in Articles 15 to 21 of the GDPR. In particular, these rights consist of:
receive confirmation of the existence of the user’s personal data and access to their content (access rights);
update, amend and/or correct personal data (right of rectification);
request cancellation or restriction of the processing of data processed in breach of the law, including data whose storage is not necessary in relation to the purposes for which the data were collected or otherwise processed (right to erasure and right to limited erasure);
object to the processing (right to object);
withdraw consent, where given, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal (right to withdraw consent);
request the data controller to directly transfer portable data to another data controller (right to portability);
These rights may be exercised by sending a request to the Controller at the following e-mail address [email protected].
RIGHT OF COMPLAINT
Interested parties who consider that the processing of personal data relating to them carried out through this site is in breach of the provisions of the Regulation have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali, as provided for in Articles 13 and 77 of the Regulation itself, as well as Article 140 bis of the Privacy Code, or to take legal action in accordance with Article 79 of the Regulation.